github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-06-30 00:22:15 +00:00
Code Issues Projects Releases Wiki Activity

fix(app_actions): base_syscalls check for empty string

Browse Source 
Signed-off-by: Melissa Kilby <melissa.kilby.oss@gmail.com>
This commit is contained in:
Melissa Kilby 2023-02-23 23:14:56 +00:00 committed by poiana
parent 58dc60e58d
commit 0de9af9ed0
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
userspace/falco/app/actions/helpers_interesting_sets.cpp
View File

@ -22,6 +22,8 @@ using namespace falco::app::actions;
void extract_base_syscalls_names(const std::unordered_set<std::string>& base_syscalls_names, std::unordered_set<std::string>& positive_names, std::unordered_set<std::string>& negative_names) void extract_base_syscalls_names(const std::unordered_set<std::string>& base_syscalls_names, std::unordered_set<std::string>& positive_names, std::unordered_set<std::string>& negative_names)
{ {
for (const std::string &ev : base_syscalls_names) for (const std::string &ev : base_syscalls_names)
{
if (!ev.empty())
{ {
if (ev.at(0) == '!') if (ev.at(0) == '!')
{ {
@ -33,6 +35,7 @@ void extract_base_syscalls_names(const std::unordered_set<std::string>& base_sys
} }
} }
} }
}
static libsinsp::events::set<ppm_event_code> extract_rules_event_set(falco::app::state& s) static libsinsp::events::set<ppm_event_code> extract_rules_event_set(falco::app::state& s)
{ {